Chapter 6: ACLs Outline:
Chapter Review |
Chapter Overview |
6.1 | Access Control Lists (ACLs)
6.1.1 | What are ACLs
6.1.2 | Reasons to create ACLs
6.1.3 | Testing packets with ACLs
6.1.4 | How ACLs work
6.1.5 | Flowchart of the ACL test matching process
6.2 | ACL Configuration Tasks
6.2.1 | Creating ACLs
6.2.2 | The purpose and function of wildcard mask bits
6.2.3 | The any command
6.2.4 | The host command
6.3 | Standard ACLs
6.3.1 | What are standard ACLs
6.3.2 | Writing a valid standard ACL command using all available parameters
6.3.3 | How to verify access lists
6.3.4 | Writing a standard ACL to permit traffic from a source network
6.3.5 | Writing a standard ACL to deny a specific host
6.3.6 | Writing a standard ACL to deny a specific subnet
6.4 | Extended ACLs
6.4.1 | What are extended ACLs
6.4.2 | Extended ACL parameters
6.4.3 | UDP and TCP port numbers
6.4.4 | Writing an ACL for denying FTP on an Ethernet interface
6.4.5 | Writing an ACL that denies Telnet out of an Ethernet port and permits all other traffic
6.5 | Named ACLs
6.5.1 | Configuring named ACLs
6.5.2 | The deny command
6.5.3 | The permit command
6.6 | Using ACLs with protocols
6.6.1 | Protocols for which ACLs can be created
6.7 | Placing ACLs
6.7.1 | Rule: "Putting the extended ACL as close as possible to the source of traffic denied"
6.7.2 | Using ACLs in firewall routers
6.7.3 | A firewall architecture to protect you from intruders
6.8 | Verifying ACLs
6.8.1 | How to verify ACLs and interpret the output
Chapter Summary |
Chapter Quiz |